CVE-2021-23134

Katalog CVE

CVSS 7.8 · High EPSS 0,38%

Kerentanan Use After Free pada netapp cloud backup, netapp h300s firmware +8 lainnya. Skor CVSS 3.1 7.8 (High) menurut paloaltonetworks.com.

Deskripsi (NVD)

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Rincian

Terbit di NVD

12 Mei 2021

Terakhir diubah

30 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber paloaltonetworks.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d mailing list · patch · advisory vendor
• https://www.openwall.com/lists/oss-security/2021/05/11/4 mailing list · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWR... advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSS... advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210625-0007/ advisory pihak ketiga